Static task
static1
Behavioral task
behavioral1
Sample
146ac68480d416552935860fbd3f9415_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
146ac68480d416552935860fbd3f9415_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
146ac68480d416552935860fbd3f9415_JaffaCakes118
-
Size
2.3MB
-
MD5
146ac68480d416552935860fbd3f9415
-
SHA1
dc92a069392dd1c477324312c83d22609bf69828
-
SHA256
f3ebc96782c04796506dfe5a658caf4de859e7c9e4c5a2b0bb331070c9132fbd
-
SHA512
c32b42859477b58920fd04f8b32fdffec4cab8b83b87a5e4567f4c118be4d91f606a853660a989aebe6b0331d26f934cc5cae524f6bdef2471465301564edb79
-
SSDEEP
49152:kwHxGwvQ/SEsIQaDWqvzrj3no9vLc2DjtUjG2Qb/5/Kn5Fcw2:kwIwvQHmmWqrrM9vvFO9Oonp2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 146ac68480d416552935860fbd3f9415_JaffaCakes118
Files
-
146ac68480d416552935860fbd3f9415_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ